Endpoint Protection

Hi,

we have blocked some applications in symantec using ADC Policy

But when we tried to uninstall the application, symantec is not allowing to do.

so we need to stop the symantec and uninstall?

is there any solution to uninstall without stopping symantec?

hi Check this forums.

https://www-secure.symantec.com/connect/forums/sep-12-app-dev-control-polict-block-renaming-exe-files

Hi,

My problem is not the application blocking..my apps are blocking correctly..

But those apps iam unable to uninstall with SEP ON on clients

Have you blocked this application by SEP ADC policy ?

Yes..i blocked in ADC

If you have blocked by ADC you don't be install and unistall blocked application.

If you want to remove application first you will be stop Sep service or move system un blocked group so you can be removed the application.

you need to remove the ADC policy from the machine. SInce ADC policy has the application to watch to and take the action not to edit,delete hence you facing difficulty in uninstall. To uninstall the application put default ADC policy or edit the existing ADC policy to not to monitor the application.

So then how to change it to monitor? if i changed whether it will block or not?

edit the policy and make Actions just to log only and "continue to process other rules" or on second thought remove the application from the ADC application rule > let client take the updated policy. Since it will not have anything to monitor you can remove the software.

If you requirement you will be blocked application

When you want to uninstall applictaion you just move your sep client another group where application block policy are not applied.

did the above reeommendations helped?

Hi Pete,

is i choose the first recommendation, it will block but we cant uninstall the app?

second option i surely want to block

it is only for temporary basis, i.e when you want to uninstall move the client to group where there is no ADC policy applied. Once you uninstall and reinstall, then you can move the client to the group which has the policy to monitor the application.

So we need to move the system with OU without adc and perform the uninstallation...

Yes you can perfrom this activity .

yes, for temporary period until you need to uninstall. Once you uninstall and reinstall if you still want to monitor you can put the client back into the group have ADC policy to monitor this application.

on the other hand, login into safe mode and uninstall .

Hi;

If you know the uninstall procedure. And which files runs during the uninstall. Add this file to the exeption may be a solution.